Ryan Cobb

Covenant. Covenant is a collaborative .NET C2 framework for red teamers.

SharpSploit. SharpSploit is a .NET post-exploitation library written in C#

PSAmsi. PSAmsi is a tool for auditing and defeating AMSI signatures.

SharpGen. SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

ObfuscatedEmpire. ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.

SharpShell. SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

Elite. Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

InsecurePowerShell. InsecurePowerShell is PowerShell with some security features removed.

C2Bridge. C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.

InsecurePowerShellHost. InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features removed.

Judge. Judge is a tool for scoring/debugging network services on a CCDC (or similar competition) network.

PowerUpSQL. PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

Covenant-wiki. Wiki documentation for the Covenant project.

MailSniper. MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

LyncSniper. LyncSniper: A tool for penetration testing Skype for Business and Lync deployments

slides. Collection of slide decks from various presentations.

PSReflect-Functions. PowerShell

readline. A Pure C# GNU-Readline like library for .NET/.NET Core

BlazorExample. C#

cobbr.io. Blog

presentations. SpecterOps Presentations